Network Security

NAT services have been reduced to only 2 vlans.The computers on the remaining vlans use ISA_Server for access to the internet.The syslog server has tremendous amounts of the following messages:305005Error Message IREFO BJ:24101%PIX-3-305005: No tra...

I have a PIX 501 with a Concentrator 3005 that establishes site VPN's to our other offices. When I setup static inside routes in the PIX to point to the Concentrator for my remote office LAN IP's I cannot route traffic. When a client on the PIX lan...

Hi,I have a pix 501 which will not allow me to upgrade it to 3 DES and simultaneously a 10 to 50 IP addresslicense. When I have a look ta the key description generated it states the pix is only allowed for DES and not 3DES so it overwrites the 3DES k...

Am I correct in my findings that it is not possible to configure an external ip addresses on two different ports say 80 and 8081 re-directing to a single inside address port 80. Pix generates "overlap" errors when attempting to configure this. Backg...

Hi all,I have private point 2 point network, simply HQ and remote site scenario. I have this problem of remote site workstations not able to access servers (eg. not able to ping) located at HQ which the servers default gw are pointing to the pix. How...

What signature enabale on PIX? I must enable first?

HiHave a 515E PIX with a "Internet" ip range for both the outside and DMZ interface.I'm having a problem when I specify and access list to allow the mail relay to forward mail to the internal mail server.This is my configfixup protocol smtp 25access-...

Hi, This is a little note to make eveyone aware of the issue I have come across with Avaya IP Phones and the Pix. I have an IP phone on the outside interface with my phone system on the inside. Everything works great for a few hours (or a clear xlate...

Two questions:What is the best practice for PIX messages to a syslog server. I have been exporting to a SQL database. However the amount of information is tremendous. What would be the best way to reduce the amount of information, yet get useful info...

Does the vpn3005 support GRE tunnels and how do I configure it? Reference paper will be fine.Thanks/Bent

Hi all, I have a PIX 501 that is not responding. All the Port LED's remain on and it is not passing traffic. I cannot access it via the console or ethernet ports either. Has anybody come across this before?Trish

We can't ping our secondary PIX 515e outside interface and it will not stop (Waiting). The show failover looks like below.Other host: Secondary - Standby Active time: 690 (sec) Interface outside Interface outside (x.x.x.x): Normal (Waiting) Inte...

PIX version 6.2In a separate post, I was able to get a confirmation that the following PIX configuration will work:static(inside,outside) tcp 172.18.124.10 <AAAA> 10.1.1.10 <BBBB> netmask 255.255.255.255 0 0 static(inside,outside) tcp 172.18.124.10 <...

I am upgrading my failover pixs by the instruction in cisco document number 4801. The primary pix is connected only to my laptop which is running a tftp server. Using the copy tftp flash I get a connection timed out error. The Laptop is connected t...

I have a PIX 506E with IOS VER 6.1 up and running without any problems from more than year. And now if it powered off, it didn’t boot. And when I open the chasse and clear its CMOS battery using jumper beside the battery, it boots o.k. and running wi...